easypostman-bin
The package installs a prebuilt binary from the project's official GitHub releases, which is normal for -bin packages; the source is verifiable and checksummed, and no untrusted or obfuscated code execution occurs during build or install.
Triggered rules
zero_votes_recent
Uploaded within the last 14 days with 2 or fewer community votes — little peer review so far.
llm_review
An AI model (qwen/qwen3-235b-a22b-2507) reviewed this and agrees it is LOW (confidence 95%): The package installs a prebuilt binary from the project's official GitHub releases, which is normal for -bin packages; the source is verifiable and checksummed, and no untrusted or obfuscated code execution occurs during build or install.
PKGBUILD
# Maintainer: flydut <lbaofengflydut@gmail.com>
#
# Prebuilt binary package built from the upstream Debian release, so that
# users do not need a full JDK/Maven toolchain to run EasyPostman.
# The upstream .deb already bundles a trimmed Java runtime.
pkgname=easypostman-bin
pkgver=6.2.9
pkgrel=1
pkgdesc='An open-source API debugging and stress testing tool inspired by Postman and JMeter'
arch=('x86_64')
url='https://github.com/lakernote/easy-postman'
license=('Apache-2.0')
depends=(
'alsa-lib'
'brotli'
'bzip2'
'freetype2'
'hicolor-icon-theme'
'libpng'
'libx11'
'libxau'
'libxcb'
'libxdmcp'
'libxext'
'libxi'
'libxrender'
'libxtst'
'xdg-utils'
'zlib'
)
provides=('easypostman')
conflicts=('easypostman')
options=('!strip' '!debug')
source=(
"${url}/releases/download/v${pkgver}/EasyPostman-${pkgver}-linux-amd64.deb"
"LICENSE::${url}/raw/v${pkgver}/LICENSE"
)
sha256sums=(
'e0c20b5ee9b0f46a1f81c62020cb92190c46b95014d9e19ce389f758baaeb000'
'c71d239df91726fc519c6eb72d318ec65820627232b2f796219e87dcf35d0ab4'
)
prepare() {
cd "$srcdir"
# Unpack the Debian archive: control.tar.zst holds the maintainer scripts,
# data.tar.zst holds the /opt/easypostman tree.
bsdtar -xf "EasyPostman-${pkgver}-linux-amd64.deb" data.tar.zst
bsdtar -xf data.tar.zst
# Upstream ships a 192x192 icon inside the application jar; the .deb only
# contains a 32x32 copy used by its own desktop entry.
bsdtar -xOf 'opt/easypostman/lib/app/easy-postman.jar' icons/icon.png > 'easypostman-192.png'
}
package() {
install -d "$pkgdir/opt"
cp -a 'opt/easypostman' "$pkgdir/opt/"
# Drop the Debian-only bits: upstream desktop entries live next to the
# application and the doc directory only carries a copyright stub.
rm -f "$pkgdir/opt/easypostman/lib/"*.desktop
rm -rf "$pkgdir/opt/easypostman/share"
# Icons: 192x192 from the jar, 32x32 from the Debian package.
install -Dm644 'easypostman-192.png' \
"$pkgdir/usr/share/icons/hicolor/192x192/apps/easypostman.png"
install -Dm644 'opt/easypostman/lib/EasyPostman.png' \
"$pkgdir/usr/share/icons/hicolor/32x32/apps/easypostman.png"
# Command line launchers.
install -d "$pkgdir/usr/bin"
ln -s /opt/easypostman/bin/EasyPostman "$pkgdir/usr/bin/easypostman"
ln -s /opt/easypostman/bin/EasyPostmanMCP "$pkgdir/usr/bin/easypostman-mcp"
# Desktop entry (the Debian package generates this at postinst time via
# xdg-desktop-menu; pacman expects the file to be installed directly).
install -d "$pkgdir/usr/share/applications"
cat > "$pkgdir/usr/share/applications/easypostman.desktop" <<EOF
[Desktop Entry]
Type=Application
Name=EasyPostman
GenericName=API Testing Tool
Comment=An open-source API debugging and stress testing tool
Exec=/opt/easypostman/bin/EasyPostman %U
Icon=easypostman
Terminal=false
Categories=Development;
Keywords=api;http;rest;postman;testing;debug;
StartupWMClass=com-laker-postman-App
StartupNotify=true
MimeType=application/json;
EOF
install -Dm644 'LICENSE' "$pkgdir/usr/share/licenses/$pkgname/LICENSE"
}
Scan history
| Scanned at (UTC) | Severity | Rules |
|---|---|---|
| 2026-10-31 03:57:49 | Low | 2 |